Lizamoon: SQL injection attack -heads up..

Gertex

New member
Jan 21, 2011
535
28
0
All,

There is a really bad nasty SQL injection attack 'Lizamoon' out there, that has grown from just a couple of sites to over a million sites infected.

Primarily, MS SQL backend's are affected BUT it is not 100% clear yet that it ONLY affects them.

When infected it will redirect to a Microsoft Security Essentials warning message that will then infect your local workstations.

This is NOT an april fools...

[ame=http://www.youtube.com/watch?v=wKI5dg1cs74]YouTube - LizaMoon mass injection explained[/ame]

Millions of sites hit with mass-injection cyberattack - Computerworld

SANS Internet Storm Center; Cooperative Network Security Community - Internet Security

These guys have the most comprehensive guide on it:

Security Labs